Exam AZ-720 topic 2 question 27 discussion

Actual exam question from Microsoft's AZ-720

Question #: 27
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Disable peering on the virtual network.
Does the solution meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️

by Kanoniermalri at March 13, 2023, 10:52 a.m.

Comments

Submit Cancel

terawatt

1 year, 11 months ago

Selected Answer: B

Disabling peering on the virtual network would stop all communication between the peered networks, which could affect more than just the one new subnet you want to isolate.

upvoted 1 times

...

cris_exam

2 years, 2 months ago

this question makes no sense! Peering from where? Are we imagining there are multiple VNETs here connected to the VPNGW VNET? If yes, why not mentioned and what topology exactly and also where is that new subnet created? This question needs reported/flagged if it should be received in the exam in my opinion. I may be wrong, but it doesn't makes sense to me.

upvoted 2 times

cris_exam

2 years, 2 months ago

If the new subnet would be created in a new VNET peered to the VNET where the subnet Gateway is, then yes, disabling the peering would achieve the goal - YES However, this is just guessing/imagining without more info about the design context.

upvoted 1 times

...

Kanoniermalri

2 years, 3 months ago

this is incorrect - the correct answer is not listed in this dump. Scale the gateway to Generation2

upvoted 2 times

Neostar

1 year, 11 months ago

You can't scale a gateway from Gen1 to Gen2. To change the generation, you need to delete and recreate it.

upvoted 2 times

...

MarshalLaw

2 years, 2 months ago

You are right. The question would be as follows: A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP). A new subnet should be unreachable from the on-premises network. You need to implement a solution. Solution: Scale the gateway to Generation2. Does the solution meet the goal? A. Yes B. No

upvoted 1 times

...